SSO patterns we trust
Single sign-on patterns we've shipped, what works for which case, and the failure modes we've stopped repeating.
21 May 2026
Insights
Docker for long-life services
Containers are 12 years old and still the right answer for software that has to keep running for a decade.
23 Apr 2026
Elasticsearch for regulator search
What it took to make Elasticsearch actually useful for regulators publishing investigation reports, complaints data, and multi-language guidance.
19 Mar 2026
MACH: a measured take
Microservices, API-first, Cloud-native, Headless. Sometimes the right architecture, sometimes architectural fashion. Here's how we decide.
12 Feb 2026
React for accessible public services
SPAs have a bad reputation for accessibility. Done properly — server-rendered, semantic, framework-aware — that reputation is undeserved.
15 Jan 2026
Python in production for regulators
Why Python is the right choice for software that has to be readable, auditable, and maintainable for 15 years.
18 Nov 2025